@agentvault/agentvault 0.20.23 → 0.20.24

package/dist/cli.js

@@ -62727,6 +62727,27 @@ function mlsFileName(groupId) {
   const safe = groupId.replace(/[^a-zA-Z0-9_-]/g, "_");
   return `mls-${safe}.json`;
 }
+async function hasPendingWelcome(dataDir2, groupId) {
+  try {
+    const filePath = join(dataDir2, `mls-kp-pending-${groupId.replace(/[^a-zA-Z0-9_-]/g, "_")}.lock`);
+    await readFile(filePath);
+    return true;
+  } catch {
+    return false;
+  }
+}
+async function setPendingWelcome(dataDir2, groupId) {
+  await mkdir(dataDir2, { recursive: true, mode: DIR_MODE });
+  const filePath = join(dataDir2, `mls-kp-pending-${groupId.replace(/[^a-zA-Z0-9_-]/g, "_")}.lock`);
+  await writeFile(filePath, (/* @__PURE__ */ new Date()).toISOString(), { encoding: "utf-8", mode: FILE_MODE });
+}
+async function clearPendingWelcome(dataDir2, groupId) {
+  try {
+    const filePath = join(dataDir2, `mls-kp-pending-${groupId.replace(/[^a-zA-Z0-9_-]/g, "_")}.lock`);
+    await rm(filePath);
+  } catch {
+  }
+}
 async function saveMlsState(dataDir2, groupId, state) {
   await mkdir(dataDir2, { recursive: true, mode: DIR_MODE });
   const filePath = join(dataDir2, mlsFileName(groupId));
@@ -63640,9 +63661,6 @@ var init_channel = __esm({
       _mlsKeyPackage = null;
       /** Pending KeyPackage bundle from request-Welcome flow (used by _handleMlsWelcome). */
       _pendingMlsKpBundle;
-      /** Channels that have already had their sync fallback KeyPackage published this connect cycle.
-       *  Prevents multiple agents from overwriting each other's KP for the same channel. */
-      _pendingWelcomeChannels = /* @__PURE__ */ new Set();
       /** In-memory credential store for renter-provided credentials (never persisted). */
       _credentialStore = new CredentialStore();
       /** Dedup buffer for A2A message IDs (prevents double-delivery via direct + Redis) */
@@ -65203,8 +65221,7 @@ var init_channel = __esm({
               }
             }
             const memberMlsGroup = chState.mlsGroupId ? this._mlsGroups.get(`a2a:${chId}`) : void 0;
-            if (chState.role === "member" && !memberMlsGroup?.isInitialized && !this._pendingWelcomeChannels.has(chId)) {
-              this._pendingWelcomeChannels.add(chId);
+            if (chState.role === "member" && !memberMlsGroup?.isInitialized) {
               try {
                 let groupId = chState.mlsGroupId;
                 let memberIds = [];
@@ -65238,6 +65255,11 @@ var init_channel = __esm({
                 if (memberIds.includes(this._persisted.deviceId)) {
                   console.log(`[SecureChannel] A2A ${chId.slice(0, 8)} member in server membership but no local MLS state \u2014 requesting Welcome`);
                 }
+                if (await hasPendingWelcome(this.config.dataDir, groupId)) {
+                  console.log(`[SecureChannel] A2A ${chId.slice(0, 8)} sync fallback: skipping \u2014 Welcome already pending for group=${groupId.slice(0, 8)}`);
+                  continue;
+                }
+                await setPendingWelcome(this.config.dataDir, groupId);
                 const mgr = new MLSGroupManager();
                 const identity = new TextEncoder().encode(this._persisted.deviceId);
                 const kp = await mgr.generateKeyPackage(identity);
@@ -66116,7 +66138,6 @@ var init_channel = __esm({
             clearInterval(this._deliveryHeartbeat);
             this._deliveryHeartbeat = null;
           }
-          this._pendingWelcomeChannels.clear();
           if (this._stopped) return;
           this._setState("disconnected");
           this._scheduleReconnect();
@@ -67148,7 +67169,8 @@ ${messageText}`;
               this._mlsGroups.set(`a2a:${channelId}`, mgr);
               await saveMlsState(this.config.dataDir, groupId, JSON.stringify(mgr.exportState()));
               await this._persistState();
-              this._pendingWelcomeChannels.delete(channelId);
+              await clearPendingWelcome(this.config.dataDir, groupId).catch(() => {
+              });
               this._pendingMlsKpBundle = void 0;
               console.log(`[SecureChannel] Joined MLS group for A2A ${channelId.slice(0, 8)} via Welcome (epoch=${mgr.epoch})`);
               if (this.config.onA2AChannelReady && entry.conversationId) {
@@ -88917,7 +88939,7 @@ var init_index = __esm({
     init_skill_invoker();
     await init_skill_telemetry();
     await init_policy_enforcer();
-    VERSION = true ? "0.20.23" : "0.0.0-dev";
+    VERSION = true ? "0.20.24" : "0.0.0-dev";
   }
 });